emqx/changes/v4.4.11-en.md

1.8 KiB

Enhancements

  • OTP upgrade from 24.1.5-3 to 24.3.4.2-1 #9265. Change highlights:

    • Erlang/OTP SSL library vulnerability fix
    • Added support for OCSP (Online Certificate Status Protocol) Stapling
    • Added CRL (Certificate Revocation List) cache auto refresh
  • Added support for OCSP stapling and CRL caching #9297.

  • Added support for specifying custom modules for adding clientid and common name aliases #9297. Now you can implement a simple callback to enrich clients with aliases, and then use the aliases in the authentication and authorization (ACL) rules' place holders (%cida for clientid alias and %cna for username alias).

  • Added support for specifying custom modules for custom authentication #9297. To support simple authentication rules, it is no longer necessary to implement a full-blown plugin.

  • Added a JWT management for Rule-Engine, for creating and refreshing JWT tokens in rule engine actions #9241. This feature is so far only used in EMQX Enterprise Google PubSub integration. Can be used as webhook integration's JWT authentication against the webhook service endpoint.

  • Update gen_rpc dependency to 3.0.0.

Bug fixes

  • Fix get trace list crash when trace not initialize. #9156

  • Fix create trace sometime failed by end_at time has already passed. #9156

  • Fix the Discovery error: no such service error that occurred during helm chart deployment, resulting in an abnormal discovery of cluster nodes. #9388